1621 matches found
Malicious code in stream-magellan-gemini-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121379
Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan npm...
Malicious code in chakra-ui-lint-webpack-yildun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114852
Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...
EUVD-2025-124058
Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...
EUVD-2025-122794
Malicious code in registry-fork-terser-webpack-plugin-rollup npm...
Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115707
Malicious code in capella-webpack-octans-postgres npm...
Malicious code in altair-playwright-webpack-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120763
Malicious code in virgo-proxima-webpack-transform npm...
EUVD-2025-114953
Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...
EUVD-2025-114651
Malicious code in dactyl-webpack-loopback-winston npm...
EUVD-2025-113855
Malicious code in eslint-webpack-celeste-betelgeuse npm...
EUVD-2025-121370
Malicious code in terser-webpack-plugin-non-blocking-gemini-colors npm...
EUVD-2025-120518
Malicious code in webpack-triton-optimize-css-assets-webpack-plugin-meteor npm...
Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114665
Malicious code in dactyl-inquirer-version-webpack npm...
EUVD-2025-113503
Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides npm...